Changed the download to check the hmac sha256